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ALL nJFORHATION COFTAIHED 
HEPEIlf IS UWrLA33IFIE1> 

DATE 11-09-2007 BY 6 5179 /dai-i/kSE / cak 

National Security Letters (NSL) - An NSL is an ackninistrative demand for documents 
or records whicli can be made by the FBI in support of either a Preliminaiy or Full National 
Security Investigation. There are presently eiglit variations of the three statutorih' permitted 
NSL demands. They include requests permitted by tlie Riglit to Financial Privacy Act 
(RFPA) (Title 12. U.S.C. §§ 3414(a)(5)) for 1) financial institution records. They also 
include requests permitted by the Fair Credit Reporting Act (FCRA), Title 15, U.S.C. 

§§1681u and V, for 2) the identity of financial institutions (15 U.S.C. § 1681u(a)); 3) 
consumer identifying infonnation (15 U.S.C. § 1681 u(b) ); and 4) full credit reports in 
international terrorism cases (15 U.S.C.§1681 v). Lastly, they include requests permitted by 
the Electronic Communications Privacy Act (Title 18, U.S.C. § 2709): for 5) telephone 
subscriber information: 6) toll billing records; 7) electronic communication subscriber 
infonnation: and 8) electroiiic comnuiiiication transactional records. As a general matter, all 
NSLs are unclassified and all infonnation returned pursuant to an NSL is unclassified. The 
fact that particular information souglit by an NSL is related to an authorized investigation is 
unclassified. However, the maiuier in which information .souglit by an NSL is related to a 
particular authorized investigation most likely is classified. 

a. Financial Account Records pursuant to Title 12. LIS.C. § 3414(a)(5)^ 

1 . In accordance with provisions of the Riglil to Financial Privacy Act 
(RFP.A), a financial institution shall provide the FBI with financial 
infomialion pursuant to a written request from llie Director of the FBI or the 
Director’s designee upon certification to the financial institution that the 
records are souglit for foreign counterintelligence purposes to protect against 
international terrorism or clandestine intelligence activities, provided that 
such an investigation of a United States Person is not conducted solely upon 
tlie basis of activities protected by the First .Aiiendment to the Constitution. 

2. The RFP.A applies only if the entity from which the government is 
seeking financial records of a "financial institution," as defined in the statute. 

For purposes of the section of the RFPA "financial institution" includes 
insured bank; commercial bank or tmsl company; private banker; credit 
union; thrift institution; broker or dealer registered w ith the SEC; investment 
banker or investment company;, currency exchange: issuer, redeemer or 
cashier of travelers' checks, checks, money orders; operator of a credit cai'd 
system: insurance company: pawnbroker; loan or finance company; travel 
agenc}': licensed sender of money; telegraph compan\'; persons in\'olved in 
real estate closings and settlements; U.S. Postal Ser\ice. agency of 
U.S./statedocal govenmieiit canying out any of foregoing; casino: any 
business similar to the above list; any business wliose cash transactions have 
higli degree of usefulness in criminal, tax or regulatory matters. 

3. The RFP.A defines a"[F]inancial record" a.s an original of, a copy of, or 
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information known to have been derix ed from, any record held by a financial 
institution pertaining to a customer's relationship with the financial 
institution. 

4. By EC dated 1 1 /09/200 1 , the Director designated approval authority to 
the following Bureau officials: (1) the Deputy Director; (2) the Assistant 
Directors (AD) and all Deputy Assistant Directors (DAD) of the 
Counterterrorism Division (CTD) and the Counterintelligence Division 
(CD);" (3) the General Counsel and Deputy General Counsel for National 
Security .Affairs; (4) the Assistant Director in Charge and SACs of the New 
\'ork. Los Aigeles. and Washington field offices; and (5) the SACs of all 
other field offices. By EC dated 10/17/2003, the Director designated 
approval authority to the Senior Counsel for National Security Affairs. By 
EC dated 1 0/3 1 '2003. the Director also designated approval authority to the 
E^VD for CounterterrorismA'ounterintelligence, and to the AD and D.AD for 
the Cyber Division. Approval authority is not delegable below' the SAC level 
and an acting SAC does not liave approx'al authority. 

5. Congress has imposed reporting requirements for the FBI's use of NSLs 
to obtain financial records under the Right to Financial Privacy Act. The 
National Security Law Branch (NSLB) of the Office of General Counsel is 
responsible for compiling the necessaiy' information and submitting the 
requisite reports to Congress. To ensure that NSLB can accurately report to 
Congress on RFPA NSLs. all conununications documenting the approval and 
issuance of national security letters from the field or FBIHQ Divisions 
should include NSLB in the "To" section and must include NSLB in the lead 
section. 

b. Identity of Financial Institutions pursuant to Title 15.U.S.C. § 1681u(a).^ 

1 . In accordance with provisions of the Fair Credit Reporting .Act. a 
consumer credit bureau (Experian, Equifax, TransUnion) shall provide the 
FBI with information about the financial institutions with which the 
consumer maintains an account or has maintained an account, pursuant to a 
w ritten request from the Director of the FBI or the Director's designee upon 
certification that such information is sought for the conduct of an authorized 
investigation to protect against international terrorism or clandestine 
intelligence activities, provided that such an investigation of a United States 
person is not conducted solely upon the basis of activities protected by the 
First .Amendment to the Constitution of the United States. 


^ At the time of the delegation the Counterintelligence Division was titled National Security 
Division. 
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2. By EC dated 1 1/09/2001. the Director designated approval authority to 
the following Bureau officials: (1) the Deputy Director: (2) the Assistant 
Directors (AD) and all Deputy Assistant Directors (DAD) of the 
Counterterrorism Division (CTD) and the Counterintelligence Division 
(CD); (3) the General Counsel and Deputy General Counsel for National 
Security Affairs; (4) the Assistant Director in Charge and SACs of the New 
York. Los Angeles, and Washington field offices; and (5) the SACs of all 
other field offices. By EC dated 10/17^2003, the Director designated 
approN'al authority to the Senior Counsel for National Security Affairs. By 
EC dated 1 0/3 1 /2003. the Director also designated approval authority to the 
E.AD for Counlerterrorism/Counterintelligence, and to the AD and DAD for 
the Cyber Division. Approval authority is not delegable below the SAC 
le\^el. and an acting SAC does not have appro\^al authority. 

3. Congress has imposed reporting requirements for the FBI’s use of NSLs 
to obtain financial institution listings under the Fair Credit Reporting Act. 
NSLB is responsible for compiling the necessar>' information and submitting 
the requisite reports to Congi'ess. To ensure tliat NSLB can accurately report 
to Congress on FCR.4 §1681u(a) NSLs, all communications documenting 
the approval and issuance of national security letters from the field or 
FBIHQ Divisions must include NSLB in the lead section. 

Consumer Ideiitifyiiig Information pursuant to Title 1 5. U.S.C. § 

1681u(b)‘‘ 

1. In accordance with provisions of the Fair Credit Reporting Act. a 
consumer credit bureau (Experian. Equifax. fransUnion) shall provide the 
FBI with consumer account identification information pursuant to a written 
request from the Director of the FBI or the Director's designee upon 
certification that such infonnation is sought for the conduct of an authorized 
investigation to protect against international terrorism or clandestine 
intelligence activities, provided that such an investigation of a United States 
person is not conducted solely upon the basis of activities protected by the 
First .Anendment to the Constitution of the United States. 

2. Consumer Identifying Information includes the name, address, fonner 
address, place of employment and fbnncr places of employment of the 

consumer. 

3. By EC dated 1 1/09/2001, the Director designated approval authority to 
the follow ing Bureau officials: (1) the Deputy Director; (2) the Assistant 
Directoi*s (AD) and all Deputy Assistant Directors (DAD) of the 
Counterterrorism Division (CTD) and the Counterintelligence Division 
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(CD): (3) the General Counsel and Deputy General Counsel for National 
Security Affairs; (4) the Assistant Director in Charge and SACs of the New 
York. Los Angeles, and Wasliington field offices; and (5) the SACs of all 
other field offices. By EC dated 10/17/2003. the Director designated 
approval authority to the Senior Counsel for National Security Affairs. By 
EC dated 1 0/3 1 /2003. the Director also designated approval authority to the 
EAD for Counterterrorism/Counterintelligence, and to the AD and DAD for 
the Cyber Division. Appro^'al authority is not delegable below the SAC 
level, and an acting S.AC does not have approval authority. 

4. Congress has imposed reporting requirements for the FBI's use of NSLs 
to obtain consumer identifying information under the Fair Credit Reporting 
Act. NSLB is responsible for compiling the necessary infonnation and 
submitting the requisite reports to Congress. To ensure that NSLB can 
accurately report to Congress on FCRA §1681u(b) NSLs, all 
communications documenting the approval and issuance of national security 
letters from the field or FBIHQ Divisions should include NSLB in the "To" 
section and must include NSLB in the lead section. 

Full Consumer Credit Reports for Counterterrorism Matters pursuant 

to Title 15. U.S.C. § 1681(v)' 

1. .A consumer credit bureau (Experian, Equifax, TransUnion) shall provide 
the FBI w ith a full consumer credit report and all other infonnation in a 
consumer's file pursuant to a written request from the Director of the FBI or 
the Director's designee upon certilication that such inlbrmation is necessary' 
for the conduct of an authorized investigation, activity, or analysis related to 
international terrorism. 

2. By EC dated 8/22/2003, the Director designated approval authority to 
the following Bureau officials: (1) the Deputy Director; (2) the EAD for 
Counteiterrorism/Counteriiitelligeiice; (3) the As.sistant Directors and all 
Deputy .Assistant Directors of the CounlerteiTorism Division (CTD): (4) the 
General Counsel, Deputy General Counsel, and Senior Counsel for National 
Security Affairs: (5) the Assistant Director in Charge and SACs of the New 
York, Los Angeles, and Washington field offices; and (6) the SACs of all 
other field offices. Approval authority is not delegable below the SAC level, 
and an acting SAC does not have approval authority. This access is 
exclusive to couuterterrorism investigative matters and is not available 
for other national security investigative matters. 

3. While Congress has not imposed reporting requirements for the FBI's use 
of NSLs to obtain foil credit reports under the Fair Credit Reporting Act. 
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nonetheless. NSLB does compile tliis infomiation in the event that it is 
asked to pro\^ide such inlbmiation to Congress. To ensure that NSLB can 
accurately report to Congress on FCRA §1681v NSLs. Tasked, all 
communications documenting the approval and issuance of national security 
letters from the field or FBIHQ Divisions should include NSLB in the "To" 
section and must include NSLB in the lead section. 

Telephone Toll Billing, and Subscriber Identification, Electronic 
Subscriber Information and Electronic Communication Transactional 
Records Information pursuant to Title 18, U.S.C. § 2709.^ 

1 . An electronic conununicatioas service provider, its officers, 
employees and agents are to comply with a written request for customer 
account business records maintained by the service pro\'ider wlien the 
Director of the FBI or the Director's designee certifies in writing to the 
sendee provider tliat the records are sought for foreign counterintelligence 
purposes to protect against international terrorism or clandestine intelligence 
activities, provided that such an investigation of a Lhiited States Person is not 
conducted solely upon the basis of activities protected by the First 
.Anendment to the Constitution. 

2. By EC dated 1 1/09/2001, the Director designated approval authority 
to the following Bureau officials: (1 ) the Deputy Director; (2) the Assistant 
Directors and all Deputy Assistant Directors of the Counterterrorism 
Division (CTD) and the Counterintelligence Division (CD); (3) tlie General 
Counsel and Deputy General Counsel for National Security .^'airs; (4) the 
.Aisisiani Director in Charge and SACs of the New York. Los .\ngeles, and 
Washington field offices; and (5) the SACs of all other field offices. By EC 
dated lOT 7/2003, the Director designated approval authority to the Senior 
Counsel for National Security .Affairs. By EC dated 10/31/2003. the 
Director also designated approval authority to the EAD for 
Counterterrorism/'Counterintelligence, and to the AD and DAD for the Cyber 
Division. .Approval authority is not delegable below the S.AC level, and an 
acting SAC does not have approval authority. 

3. Congress has imposed reporting requirements for the FBI's use of NSLs 
to obtain electronic communications service provider records pursuant to the 
Electronic Communications Privacy Act (ECPA). NSLB is responsible for 
compiling the necessaiy^ information and submitting the requisite reports to 
Congress. To ensure that NSLB can accurately report to Congress on ECP.A 
§2709 NSLs, all communications documenting the approval and issuance of 
national security letters from the field or FBIHQ Divisions should include 
NSLB in the "To" section and must include NSLB in the lead section. 
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ALL IHFOPJl&TION CDNTAIKED 

HEPEIfJ IS TJHCLASSIFIED 

DATE 11-09-2007 BY 6S179/diflh/l-:sr/aa}5 


The following coninientarj^ will discuss the features that respective NSLs share in conmion 
and highlight the differences and provide a recommended pattern for submitting requests 
for approval. 


Note - there are model NSLs and approving EC's for each type of NSL 
on the NSLB/OGC website. Please follow these models. 

1 . All NSLs must be addressed to an appropriate eompaiiy point of 
contact. The responsibility for ensuring tliat the company point of contact is 
up- to-date belongs to the drafting field division. Many POCs are listed on 
tlie NSLB website. 

2 The first paragraph of an NSL provides the appropriate statutory^ 
authorit>’ for the request, identifies the types of records requested, and 
provides available identifying information so that the company can process 
tlie NSL request. It is this first paragraph that contains the differences that 
warrant the eiglit NSL varieties. 

a Telephone subscriber and electronic subscriber NSLs should 
have a specific date for each of the phone numbers/e-mail addresses 
requested or a range of dates. The date range may be from inception 
to present, or some other specified date range relevant to the 
investigation. .Any phone numbers identified in a subscriber request 
should contain all ten digits of the phone number, including tlie area 
code. 

b Toll billing record and electronic communication 
transactional record requests should have a range of dates for each of 
the phone numbers/e-mail addresses requested. The date range may- 
be from inception to present, or some other specified date range 
relevant to the investigation, .^ny phone numbers identified in a toll 
billing record request should contain all ten digits of the phone 
number, including the area code. 

c Financial record requests should include all available 
identifS'ing infomiation to facilitate the financial institution's records 
search. Typically, such identifying infonnation includes: name, 
account numbers, social security number, and date of birth. The time 
period for financial record requests is typically from inception of 
accounl(s) to present, although a more specific date range may be 
used. 

d Credit bureau record retjiiests are similar to financial requests 
in that they should include available identifying infonnation to 
facilitate the credit bureau's records search. Typically, such 
identify ing infomiation includes; name, social security number, and 
date of birth. Tliere is no need to specify^ a date range for credit record 
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requests because tliese requests seek either a full credit report, or 
specified information from a full credit report, as the credit report is 
currentK' constituted in the flies of the credit bureau. So a time frame 
has no relev ance to this request. 

3 The second paragraph of ever>' NSL contains the statutorily required 
certification language. The certification language is virtually identical for 
eveiy^ NSL (except the certification for FCRA §1681v fiill credit reports 
references only international terrorist activities since these NSLs are not 
available in counterintelligence cases). Financial records also contain an 
additional certification that the FBI has complied with all applicable 
provisions of the RFPA. l^se of the model NSLs will ensure that tlie proper 
certifications are made. 

4 The next paragraph contains an admonition for the phone compan>'. 
ISP. financial institution, or credit bureau receiving tlie NSL. The paragraph 
warns that no otficer, employee, or agent of the company may disclose that 
tlie FBI has souglit or obtained access to tlie requested infbnnation or 
records. Some of the non-disclosure provisions specifically exempt from the 
mle disclosure within the entity to those whose assistance is needed to 
respond to the NSL. However, this concept is inherent in all NSLs. 
regardless of whether the NSL statute so states. Further, the FBI has 
interpreted non-disclosure provisions to allow the entity to consult with legal 
counsel as to its rights and obligations with respect to the NSL. 

5 The last substantive paragraph instnicts the company point of contact 
to provide the records personally to a representative of the delivering field 
division or to use a delivery sei^vice such as Federal Express or United States 
Post Office controlled delivery service to return the records to the requesting 
field office. (Information may not be returned througli routine II.S. mail.) 

.As a matter of practice, an entity will not incur such costs on its own so if a 
field office wants the records relumed via a dclh'cry service, it needs to 
provide the entity with either a Federal Express office account number or a 
prepaid package or something of that kind. Otherw ise, the entity can be 
expected to contact tlie local field office to pick up the records. The NSL 
also states that any questions should be directed to the delivering field 
division or, if the delivery has been made by Federal Express, to tlie 
requesting field office. 

6 The model NSLs for financial records, telephone toll billing records, 
and electronic communication transactional records each have a separate 
attaclmient. Tliese atfacliments provide examples of infomiation which the 
company might consider to be financial, toll billing, or electronic 
communication transactional records. As a general matter, the NSL itself 
should only' request information in the fbmi of the standard language found 
in the statute. If there is a particular type of information that you are seeking 
that is not found in the attaclunent and that you believe is within the 
parameters of the statute, please consult with you chief division counsel or 
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NSLB concerning amending the attachment. 

7 Finally, the disseminated NSL is an unclassified document because it 

does not detail the specific relevance of the requested records to an 

authorized FBI investigation, 'lliere is no need to classifS' the NSL when 

attaching it to the cover EC. 

8 The Cover EC 

a) The Cover EC serves four essential functions in the NSL 
process: ( 1 ) it documents the predication for the NSL by recording 
wh\ tile information souglit is relevant to an investigation; (2) it 
documents the approval of the NSL by relevant super\hsors and the 
legal review of the document; (3) it contains the information needed 
to fulfill tlie Congressional reporting requirements for each type of 
NSL; and (4) when the NSL package is being personally delivered, 
it transmits the NSL to tlie delivering field office for deliveiy to the 
appropriate telecommunications carrier. ISP, financial institution, or 
credit bureau: when the NSL package is being delivered by Federal 
Express or other controlled deliveiy' .service, it notifies the local field 
office of tlie NSL in the event that the entity contacts the local field 
office to retrieve the infonnation responsive to the NSL. As> stated 
above, there are eiglit varieties of model ECs drafted by NSLB and 
available on its website: Those are (1) financial records from 
financial institutions; (2) credit bureau list of financial institutions at 
which a customer maintains/has maintained an account; (3) 
consumer identifying infonnation from credit bureaus; (4) full credit 
report in inteniational terrorism cases from credit bureaus; (5) 
telephone subscriber infonnation (6) toll billing records (7) 
electronic communication subscriber infonnation; and (8) electronic 
communication transactional records. When preparing an NSL 
request, the field should use one of these model ECs. If a change to 
the model EC is thouglit necessaiy' in a particular situation, please 
consult with your chief division counsel or NSLB. 

b) Field Descriptors 

This section will generally explain how most of the EC field 
descriptors should be completed. The "Precedence" descriptor will 
typically be "ROUTINE." The "Date" descriptor should reflect the 
date the NSL and the EC were approved. The "To" descriptor w'ill 
always include "General Couasel" and the requesting squad's field 
division. It may also include the name of the delivering field division 
and the office of origin, if applicable. The "Attn" descriptor should 
include tlie National Seciiiity Law Branch ( NSLB). and the squad 
supei^-isors and case agents from the requesting squad, delivering 
field division, and office of origin, if applicable and if known. The 
"From" descriptor sliould identify' tlie certifying official's field 
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division, and include the title of the certilying official. The "Contact" 
descriptor should reflect the name and phone number of the 
requesting squad case agent. The "Drafted By" descriptor should 
reflect the name of the person who prepared the NSL package. The 
"Case ID #" descriptor must contain the case tile number relevant to 
the request, and the control file number maintained by the field. The 
"Title" descriptor should list the subject's name, any known aliases, 
whether the investigation is an FCT or IT investigation directed at a 
particular foreign power, and identify the office of origin, e.g., 
WILL1.4M B.\DGUY, AKA BILL BADGUY, FCI-IRAQ, OO: 
NEW YORK. The "Synopsis" descriptor should use the standard 
boileiplate contained in the appropriate model EC. The "Derived 
From" descriptor should be "G-3" in bold typeface. The "Declassify 
On" descriptor should be "X-1" in bold typeface. The "Preliminary 
Investigation Instituted " or "Full Investigation Instituted" 
descriptor should contain the date tlie national security investigation 
was opened on the subject. The remaining descriptors can be filled in 
accordance with the inodel EC being used. 

c) Predication and Relevance 

The USA PATRIOT Act lias greatly simplified the NSL 
process. The FBI official authorizing the issuance of an NSL is no 
longer required to certify that there are specific and articulable facts 
giving reason to believe that the information soiiglit pertains to a 
foreign power, or an agent of a foreign power. NSLs may now be 
issued upon a certification of relevance to an authorized national 
security investigation. 

Accordingly, the first para^aph in the "Details" section of the 
EC should contain the predication for tlie national security 
investigation, including whether tlie subject is a US. Person, and 
identify the relevance of the reque.sted records to the investigation. 
Both the predication and relevance should be stated clearly and 
concisely. 

d) Service of NSl „s 

NSI«s may be served by using secure fax, by personal service 
by the field office nearest the entity, or by delivery via Federal 
Express, Ihiited States Post Office controlled deliveiy service, or 
some other controlled delivery' sen'ice that provides for delivery 
directly to a named individual. However, many' companies and field 
offices have an established relationship such that both prefer that 
sen’ice be personal by the local field office. These companies are 
noted on the NSLB website. 


e)Payment for NSLs 
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AIL niFOSlLATIOK COllTAnrED 
HEPEOF T_mCLA3SIFIEI> 

DATE 11-09-2007 BY 65i7fii/i:llilh/K5r/ca}J 

ECPA does not provide for reimbursement of costs; thus, 
there is no legal obligation to pay tor telephone and email subscriber 
records, toll billing records, or electronic communication 
transactional records. Some offices choose to pay, however, 
presumably because pa^iiient serv-es to help maintain a good 
relationship with tlie provider. RFPA requires reimbursement of 
costs; Title 12, CRF Pail 219. and the appendix, provide a 
reimbursement cost schedule. FCR.A, § 1 68 lu requires 
reimbursement of costs but no reimbursement schedule has been 
promulgated. However, FCRA § 168 1 v does not provide for 
reimbursement of costs. 


e) Dissemination of NSL Information 

Information obtained through the use of an NSL may be 
disseminated in accordance with general standards set forth in The 
Attorney General's Guidelines for FBI National Security 
Investigation and Foreign Intelligence Collection (NSIG). 
Dissemination is ftirther subject to specific statutor>' limitations f e.g .. 
ECP.A, 18 U.S.C. §2709, aiid RFP.A, 12 U.S.C. §3414(a)(5)(B). 
permit dissemination if per NSIG and information is clearly relevant 
to responsibilities of recipient agency; FCR.A, 15 U.S.C. §1681u, 
permits dissemination to other federal agencies as may be necessaiv 
for the approval or conduct of an FCI investigation; no special 
statutoiy rules for dissemination under FCRA 15 U.S.C. §1681v). 

Since the information obtained througli an NSL is not 
classified, the inl'omiation itself in raw form, may be disseminated 
in accordance with the NSIG and specific statutor>^ provisions 
without regard to classification issues. How’ever. if information 
obtained from an NSL is discussed in the context of a national 
security investigation, it may be classified. Thus, if disseminating 
this infonnation with an explanation of how it pertains to a given 
investigation, it is likely that there will be classification issues. If 
such infonnation is to be used in a criminal proceeding, then steps to 
declassify are in order. If such information is to be disseminated to a 
foreign goveniment, then DIDO authority will be required. Again, 
neither of those steps is necessary if only disseminating the 
information in raw form, without any context. 
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foGC) (FBI): 




(CT D) (FBI);| 

■c) (FBi)| [; 


Duplicate CTD/NSL-CD volume 14 


I (ITSD)(FBI); 

JOGC) (FBI) 


b6 

b7C 


(SI 


Original 

From: I 


S«nt: 

To: 


JOGC) (FBI) 


Mnndflv Marrhiq 7QQ7 1;29 PJ 


L 




^007 1:29 PM 
loGCW FBl^ 


TTWBnr 


^FB1)| 

33 gc)(fbi^ 

■(ctdhfbiI 


];ogc)(fbi)Q 


JOGC) 


Subject: RE: Information tor NbL Retention Group 


OGC) (FB1)| 


ICTOD) 


ifbdH 


. (OGC) (FBI) 


SECRET .Duplicate CTD/NSL-CD volume 14 

RECORD xxxx 



SECRET 


NSL VIO- 28996 ^^^ iiforiiation cohtaiked 

HEREIH IS ITHCLASSIFIED EXCEPT 
1«IHEPE SHOOTI OTHEPJilSE 





SECRET 


Duplicate 



From: I l OGCWFBn 

Sent: M.r.hic ^nn7 ii-f>i am , 

To; I bgc) ffBllI |(OGCXFBl)J 

(OGCXFBl l | (Q«nTO 

Subject: Information for NSL Re!«nTioTOroup 

SECRET Duplicate CTD/NSL-CD volume 14 

RECORD xxxx 



<< File; Ftetention Paper.doc » 

DERIVED FROM^lSLr3 FBI Classification Guide G-3. datedJ^. Foreian 







Counterlntelliotfllce Investiaations 
DECLASSIFICATION EXEMPTION 1 
SECRET 

NSL VIO- 28997 

SECRET 






SECRET 



NSL VIO- 28998 


SECRET 



.b6 

hlC 


.b6 

b7C 

b2 


be 

b7C 


be 

b 7 C 


ALL lUFOBllkTIOH COIITAIHED 
HEPEIII 13 OTCLSS3IFIE& 

LATE 11-27-2007 BY 6 5179/dinli/'ksr/caJ; 


I I 3FW2072081tr.txt 

MessageFrom: |_^ (OGC) (FBI) 

Spnt: Friday. Fphnjarv 01. 200/ H ; 10 AM 
To: I r oGb) (FBI) 

Subject : Fwl 207208 letter 

UNCLASSIFIED 

NON-RECORD 


Assistant 06^16:^3^^31 nse1 
Classified Litigation support unit 
National S nr ii ritu Law Branch 
(202) 324^ I 


nrioinal Mpssanp- 

Erom: I l OGC) (EBI) 

sent: Thursday. NnvpSpr 18. 2004 8:16 AU 
to: I I (OGC) (FBI) ; I 

nr*' /FMb I n rnnri fj 




I I (OGC) C0GA);l 

(OCf) (FBI) ' I 

Subject: FW: 207208 letter 


rfv:rVrFRTV i 


Togo (FBI): r 


ogcTTfbITl 




UNCLASSIFIED 

NON-RECORD 


prSnSnal Meccano --- 

From: I I riTD') (FBI) 

sent: Friday, November 12, 2004 4:01 PM 

Tn; THOMAS. lliiTF F (OGC) (FBI, 


cciL 


□rnf;rS Tfr 


(OGC) (FBI) I 

Subject: FW: zu/^iua letter 


FBI^ 

j^(iC 


1 

1 (OGC) fFRT) 

ID) (l-lil); 



KELLEY, PATRICK W. 
;OGC) (FBI) 


UNCLASSIFIED 

NON-RECORD 


^Duplicate 11/12/04 email this file 


Page 1 


NSL VIO- 28999 








(ITOD) (CON) 
r 12, 2004 8:59 AM 
(ITD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


Page 2 


NSL VIO- 29000 













Duplicate 


dRFnrafTi TrgPThP\/a1iiPnfThPRank«;prrprvArTRqA.TyT 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


Page 3 


NSL VIO- 29005 









cr' cr' 

O O'! 


r 


UNCLASSIFIED 



UNCLASSIFIED 


UNCLASSIFIED 


Page 2 


NSL VIO- 29007 



From J IC OGC) (FBI) 

TiiP«;r 1 av nrlrihor "700^1 12:5 »1 | O M ■ 

To; I I (OGC) (FBI); ^(OGC)(FBI); 

Subject: FW: Drafat Letter re: The Value of The Bank Secrecy Act (BSA) 


UNCLASSIFIED 

NON-RECORD 


Bupiicate 





UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


Page 2 


NSL VIO- 29009 



In preparing your response to this request, you should determine whether your company maintains 
the following tvpes of information w hich may be considered by you to be an electronic 
conmuinications transactional record in accordance with Title 1 8 United States Code Section 2709. 

Account infomiation to include: 


b2 

b7E 


We are not requesting and you should not provide infomiation pursuant to this request that would 
disclose the content of any electronic conimunication as defined in Title 1 8 United States Code 
Section 25 1 0(8). Subject lines of e-mails are content infomiation and should not be provided 
pursuant to this request. 

If the records provided are particularly large we request that vou provide this information in 
electronic format preferably on a CR-ROM. 


NSLB 7-28-05 


klL IHFOEmTIOI'I COraitJED 

HEPOI IS mac LASS I FIED 

DATE 11-27-2007 BY 65179/dml-i/)i.sr./cali 


NSL VIO- 29010 





(01/26 1998') 



DATE; li-28--2007 

CLASSIFIED BY 6Si79/diiih/jisr/cak 

PEASOIJ; 1.4 ic) 

DEClASSIFf UM: ii-28-2032 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 00/00/2006 

To: General Ccunsel Attn: Julie Thcnas 

Deputy Gener.cil Couiueel, N3LB 

[COUNTERTERRORISM/ Attn: [UNIT} 

COUNTERINTELLIGENCE/CYBER] 

[REQUESTING OFFICE] Attn: S3- [SQUAD SUPERVISOR] 

SA [CASE AGENT] 

[OFFICE OF ORIGIN] Attn; 3A [CASE AGENT] 

SQUAD] [X] 

[DELIVERING DIVISION] Attn; SSA [SQUAD SUPERVISOR] 

[if uc^inq personal service) [SQUAD] [X] 

From: [DRAFTING DIVISION] 

[APPROVING OFFICIAL] 

Contact: [CASE AGENT, telephone number (000) 000- 

0000 ) ; 

Approved By: [ADIC NAME <IF APPLICABLE)] 

[SAC NAME] 

[AS AC NAME] 

[CDC NAME] 

[SSA NAME] 

Drafted By: [LAST, FIRST, MIDDLE NAME: INITIALS] 

m 

Case ID #: [CASE FILE NUMBER] (Pending) 

[U) Title : [ SUBJECT ] 

[AKA] [ALIAS (IF APPLICABLE) ] 

[IT/FCI - FOREIGN POWER] 

00; [OFFICE OF ORIGIN] 

Synopsis: (U) Approves the issuance of an SCPA National 

Gecurity Letter (NSL)for email subscriber information; provides 


ALL IIFOPIIATIOS COMTAItJED 
HEBEIN IS TJMCLASSIFIED EXCEPT 
lilHERE SHOOT . OTHERTiUSE 



NSL VIO- 29011 



iU) 


(U) 



Tc: [DELIVERING DIVISION] From: [DRAFTING DIVISION] 

Re:.. ^ [CASE FILE NUMBER, 00/00/2006] 


repcrtinq data; and, if necessary, transmits the N.?L for delivery 
tc the electronic condnunications service provider. 


m -X> 



G-3 

[10 years from date of EC] 


FULL/PRELIMINARY Investigation Instituted: X [00/00/2006] 


ReferenGe: tX) [CASE FILE NUMBER Serial XXX] 


Enclosures: (U) Enclosed for [DELIVERING DIVISION or OFFICE OF 

ORIGIN, depending on whether service is personal or through a 
restricted delivery service or fax] is an MSL dated [00/00/2006], 
addressed to [COMPANY POC NAME], [TITLE (if available)], [COMPANY 
NAME], [COMPANY ADDRESS - NO P.O. BOX], [CITY, STATE - NO ZIP 
CODE if using personal seirvice] , requesting the narr.e, address, 
and lengtn of service for the e-mail address holder(s) listed. 



Details: X ^ [FULL/PRELIMINARY] [INTERNATIONAL/FOREIGN 

COUNTERINTELLIGENCE] i nves Liga L ion of IJie subject, a [USPER/NON- 
USPER] , v/as a‘.ithoriz.ed in accordance with the Attorney General 
Guidelines because [Give a full e:^lanation of the justification 
for opening and maintaining an investigation of the subject; 
barebones facts will not suffice and will cause the request to be 
rejected for lack of legal sufficiency]. This electririi:- 
snisi-rirer i nf'->rrnati '-)ri is being I'equested to [Fully state the 
relevance of the requested records to the investigation] . 


(U) This electronic comniur.icaticn documents the 
[APPROVING OFFICIAL'S] apjcroval and certi f ication of the eri'i'lC'Sed 
M:?L. F'.'!' iiiariddLory repor'.irig purposes, Llie eii.’losed hSL seel.s 

subscriber information on [NUMBER OF] [e-mail/IP address(es)] 
from [ISP #1]; [NUMBER OF] [e-mail/lP address (es)] from [ISP #2], 
etc. 


(11) A 1 ' r.nrigeriieri l.s sh'iuld k>e itiade w;tii the eleel 
communication service provider to prO'Vide the records [personally 
to an errployee of the DELIVERING division OR through use of a 
delivery service or secure fax to OFFICE OF ORIGIN] within 
^NUMBER OF] business days of receipt of this request. The 
ele :t roiii c communication service p>rovider should neither send the 
records through routine mail service nor utilize the name of tl'je 
subject of the requesz in any telephone calls to the FBI. 



NSL VIO- 29012 




Tc: i;p^IVERING DIVISION] From: [DRAFTING DIVISION] 

Her [CASE FILE NUMBER, 00/00/2006] 

DISCLOSURE PROVISIONS 

[Certification and Activation of the Nondisclosure Requirement: 

There is no longer an automatic prohibition that prevents the 
recipient of a National Security Letter from disclosing that the FBI 
has requested the information. To activate the nondisclosure 
requirement, the senior FBI official approving this EC must use 
Option 1 below and include in the EC (but not in the NSL) a brief 
statement of facts that justify the nondisclosure requirement. 

Option 2 is to be used in all cases where Option 1 is not used. ] 

[Option 1 - Invoking Nondisclosure Requirement] 

(U) In accordance vith Id L'.S.C. 2709(c) I, the senior 

official approving this EC, certify that a disslO'Sure O'f the facz 
that the FBI has sought or obtained access tt the informati'jn st'ught 
by this letter may endanger the national security of the United 
States, interfere with a criminal, cour.terterrorisir., or 
ciunterintelligence investigation, interfere with diplomatic 
rel n I Il'Ijs, '.’r ejidanger ’.he life or physical safely of n . 

Brief statement of the facts justifying my 
certi f i cati'on in this case: 


[Option 2 - Declining to invoke the nondisclosure requirement] 

(U) I, the senior official approving this EC, have 
detern'iirjed that the facts of this case d: not warrant activati'jn 'I'f 
the ncndisclosure requirements under the applicable National 
Security Letter statute . 


[Include the next 2 paragraphs in all ECs] 

(U) Information received from an electronic 
c : rnmuni cat i'Cns service P'rovider may be disseminated in accordance 
with the .attorney General Guidelines or. National Security 
Investigations and Foreign Intelligence Collection and, 'with 
respect to dissemination OO' an agency cf the United Ctates, only 
if such inf'crination is clearly relevant to the authorized 
resC'Oneibilities of such agency. 



NSL VIO- 29013 





NSL VIO- 29014 



;t 


(U) - 


Tc: [DELIVERING DIVISION] From: 

Re: [CASE FILE NUMBER, 00/00/2006] 


[DRAFTING DIVISION] 


LEAD (s) : 


Set Lead 1 : 

C-ENERAL COUNSEL 


AT WASHINGTON. DC 

(U) NGLB is requested to record the appropriate 
intcrmation needed to iuitiii the Cor.gressionai reporting 
requirements for MSLs. 


Set Lead 2: (Info) 

r COUNTERTERRORISM/COUNTERINTELLIGENCE /CYBER 1 

AT WASHII^GTOH, DC 
(U) At [Unit] Read and Clear 


Set Lead 3 : 

[ DELIVERING DIVISION - fif using personal service ! 

AT [CITY. STATE 1 

(U) Deliver the enclosed NdL as indicated above. 
Up'on receipt of the information requested, [DELIVERING DIVISION] 
is requested to submio results to [DRAFTING DIVISION] and [OFFICE 
OF ORIGIN, if applicable] . 


♦♦ 



NSL VIO- 29015 



FW2072081 fitter . txt 


UNCLASSIFIED 


UNCLASSIFIED 


Page 3 


NSL VIO- 29049 



•b6 

b7C 


From: | |(OGC) (FBI) 

Sent: Fridpm PphriiarvOQ 7007 8:08 AM 

To: I |(OGC) (FBI) 

Subject; FW: DOJ's NSL monograph 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


ALL INFCiPHATIOK COJITAIEED 

HEREIM IS UWCLAS3IFIED 

DATE 11-27-2007 BY 65179/dmh/kSE/cak 


b6 

b7C 

b2 


Assistant General Cou nsel 
Classified Litigation Support Unit 



SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


NSL VIO- 29050 






From: I I fOGCl (FBI) 

Sent: Friday February 09. 2007 8:20 AM 

To: I l OGC) (FBI) 

Subject: hW: model NSLbCs (documents1,3,5.7,9,11,13, and 15 on ourwebsite) 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Assistant uenerai uounsel 
b2 Classified Litigation Support Unit 

National Spm iritv i aw Branch 
(202) 324| I 


bb 

b7C 


:1d6 

•b7C 


From: 

Sent: 

To: 

Cc: 


—Original Mes 


Subject: 


T 


](OGC) (FBI) 


Wednesday, August 02, 2006 11:29 AM 
FBI ALLCDCs 



VULlHfBl) 

FW: model NSL ECs (documents 1,3,5,7,9,11,13, and 15 on our website) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Duplicate OIG- LQGs and Ponies 


NSL VIO-29051 












NSL VIO- 29053 








Duplicate 


he 

hlC 


Message . txt 


-Original Message--- 

From 

Sent :^^nIrsna^^TOvemner 

To: FBI_ALL CDCs 

rr- ranrnni , Val eri 6 E. 

I r ose) (FBi);r^ 

subject: NSLs I 


"rrr 


1 (OGC) (FBI) 
2005 12:22 PM 


(OGC) (FBI): T HOMAS. JULIE F. (OGC) (FBI); 
I (OGC) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Duplicate CTD/NSL-CD volume 8 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


Page 2 


NSL VIO- 29055 




ALL MFORIIATIOZJ COl'JTAIIED 

HEREia .IS DKCLASSiriED 

MTE 11-27-2Q07 BY 6Si?9/d2uh/ksr,f cak 


PFnrafn i-rpoThovai ueofxheBanksecrecyActBSA . txt 
MessageFrom: I l f(iGr~l (FBI) 

bg Tiio^Hav nrFnhpr yilllS 1 ■ FR pM ■ ■ T 

To:| 1 (QQO (FBI);1 I (QSC) (FBI) I 

b / c (oct I I hH m ■ I rncrl K ogc) (fbi) 


Sub]ect: RE: Dratat lAte 


1 (Lib) ((l lgf 

Gtter re: The vi 


aiuG or jne Bank 


loGC) (FBI) 

SGcrec 


UNCLASSIFIED 

NON-RECORD 


recy Act (BSA) 

Duplicate 















Duplicate 


RFnrafTi rrRPThPVa1iiPnfThPRanl<«:iPrrprvArrR«;A_rYr 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


Page 3 


NSL VIO- 29068 









DERIVED FROM: G-3 FBI Classification Guide Q-3. dated 1/97. Foreian 


Counterintellidance Investiqations / 


N EXEMPTION 1 / 


SECRET \ / 


DERIVED FROM: G-3 FBI Classificdation Guide G-3. dated 1/97, Foreian Counterintelliaence 












SECRET 


JiTOD) (FBI) 
ILl,12AM 


kOGC)(FBI) 


DATE: 11-28-2:007 

GiASSIFIED BY 6S179/diah/]{S E/cak 

PEASOK: 1.4 (c) 

DECLASSIFY OM: 11-28-2032 


1 (OGC) (FBI); 
(OGC) (FBI); 


t CTDWFRhl 

^t^(FBI) | 

RE: Information for NSL Retention uroup 


|(ITSD)(FBI); 

l(OGC) (FBI) 


RECORD xxxx 


Duplicate 



NSL VIO-29£Ci<llHF0RKATICiN COKTAIMD 

HEPEIH IS OTICLASSIFIED EXCEPT 
IiTiEPE SHOrai DTHERtTISE 











NSL VIO- 29073 






